refactor(gateway): invoke daemons via python3 -m instead of /app/ file copies

supervise_server, git_http_backend, and gateway_init all have __main__
guards, so python3 -m bot_bottle.X replaces the individual COPY lines
to /app/. egress_addon.py stays as a file copy because mitmdump -s
requires a file path rather than a module reference.

Dockerfile.gateway

@@ -18,10 +18,8 @@
 #   /usr/bin/gitleaks                    gitleaks binary
 #   /app/egress_addon.py                 mitmproxy addon entry point
 #   /app/egress-entrypoint.sh            mitmdump launcher
-#   /app/supervise_server.py             supervise MCP server entry point
+#   /usr/local/lib/python*/bot_bottle/   installed package (all daemons + shared modules)
-#   /app/gateway_init.py                 PID 1 supervisor entry point
+#   /app/egress_addon.py                 mitmdump addon (file path required by -s flag)
-#   /app/git_http_backend.py             git-http entry point
-#   /usr/local/lib/python*/bot_bottle/   installed package (all shared modules)
 #   /etc/egress/routes.yaml              bind-mounted at run time
 #   /etc/git-gate/pre-receive            docker-cp'd at start time
 #   /git-gate-entrypoint.sh              docker-cp'd at start time
@@ -97,14 +95,11 @@ COPY pyproject.toml /src/
 COPY bot_bottle/    /src/bot_bottle/
 RUN pip install --no-cache-dir /src/
 
-# Entry-point scripts invoked by gateway_init.py. These live at /app/
+# egress_addon.py is loaded by `mitmdump -s /app/egress_addon.py`; the -s
-# so the supervisor, shell entrypoint, and ENTRYPOINT all reach them at
+# flag requires a file path, so it cannot use `python3 -m`. The shell
-# known fixed paths. Their sibling imports all go through bot_bottle.*
+# entrypoint that runs mitmdump is also a fixed-path script. All other
-# (the installed package above), not flat /app/ neighbours.
+# daemons are invoked via `python3 -m bot_bottle.X` and need no copy here.
 COPY bot_bottle/egress_addon.py      /app/egress_addon.py
-COPY bot_bottle/supervise_server.py  /app/supervise_server.py
-COPY bot_bottle/gateway_init.py      /app/gateway_init.py
-COPY bot_bottle/git_http_backend.py  /app/git_http_backend.py
 COPY bot_bottle/egress_entrypoint.sh /app/egress-entrypoint.sh
 RUN chmod +x /app/egress-entrypoint.sh
 
@@ -127,4 +122,4 @@ WORKDIR /app
 
 # PID 1 is the supervisor. It owns signal handling and exit-code
 # propagation; no `exec` chain in the entrypoint itself.
-ENTRYPOINT ["python3", "/app/gateway_init.py"]
+ENTRYPOINT ["python3", "-m", "bot_bottle.gateway_init"]

bot_bottle/gateway_init.py

@@ -78,8 +78,8 @@ def _env_for_daemon(name: str, base_env: dict[str, str]) -> dict[str, str]:
 _DAEMONS: tuple[_DaemonSpec, ...] = (
     _DaemonSpec("egress", ("/bin/sh", "/app/egress-entrypoint.sh")),
     _DaemonSpec("git-gate", ("/bin/sh", "/git-gate-entrypoint.sh")),
-    _DaemonSpec("git-http", ("python3", "/app/git_http_backend.py")),
+    _DaemonSpec("git-http", ("python3", "-m", "bot_bottle.git_http_backend")),
-    _DaemonSpec("supervise", ("python3", "/app/supervise_server.py")),
+    _DaemonSpec("supervise", ("python3", "-m", "bot_bottle.supervise_server")),
 )